test-fulltilgang.schibsted.no

Issued by R3

About this certificate

This digital certificate with serial number 03:52:20:86:77:33:dd:63:6e:4c:1d:5e:5d:98:67:4b:33:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test-fulltilgang.schibsted.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:20:86:77:33:dd:63:6e:4c:1d:5e:5d:98:67:4b:33:b8
Serial Number (int): 289283245364157750433170863901957142819768
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:f4:c4:d1:8b:a4:bb:fe:13:e6:bc:29:8b:27:2d:26:14:1e:52:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:dd:89:96:59:c3:4a:85:57:c4:30:10:2b:bc:84:1b:2f:17:9e:40
Fingerprint (sha256): 0d:f4:54:e2:ac:86:82:05:fd:02:d8:6f:a2:af:fd:9a:e8:0b:59:39:20:c7:b5:d9:28:f8:33:84:9f:75:ff:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate test-fulltilgang.schibsted.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-fulltilgang.schibsted.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-fulltilgang.schibsted.no

Other certificates including the domain name schibsted.no

(limited to 100 certificates)
bedrift.schibsted.no
bedrift.schibsted.no
id.schibsted.no
minbedrift.schibsted.no
sieb1702p.schibsted.no
payment.schibsted.no
sts.schibsted.no
password.schibsted.no
aftenposten.no
session-service.payment.schibsted.no
signicat.payment.schibsted.no
payment.schibsted.no
login.schibsted.com
info.ssa.schibsted.no
id.privacysettings.schibsted.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
schibsted.no
test-minbedrift.schibsted.no
uc16.janrainengage.com
password.schibsted.no
id.privacysettings.schibsted.no
ambassador.login.schibsted.dk
schibsted.no
signicat.payment.schibsted.no
student.schibsted.no
session-service.payment.schibsted.no
*.login.schibsted.com
payment.schibsted.no
akademi.schibsted.no
aftenposten.no
id.privacysettings.schibsted.no
selfservice.payment.schibsted.no
signicat.payment.schibsted.no
id-pre.schibsted.no
session-service.payment.schibsted.no
pre.pay.schibsted.no
akademi.schibsted.no
test-fulltilgang.schibsted.no
test-bedrift.schibsted.no
test-student.schibsted.no
annprod.schibsted.no
ambassador.login.schibsted.dk
oauth.login.schibsted.com
kundeweb-ssl.snd.no
oauth.login.schibsted.com
oauth.login.schibsted.com
test-student.schibsted.no
agresso.schibsted.no
test-bedrift.schibsted.no
finncrm.schibsted.no
uc16.janrainengage.com
session-service.payment.schibsted.no
test-fulltilgang.schibsted.no
login.schibsted.com
payment.schibsted.no
fulltilgang.schibsted.no
payment.schibsted.no
payment.schibsted.no
oauth.login.schibsted.com
selfservice.payment.schibsted.no
annonseweb.schibsted.no
akademi.schibsted.no
bedrift.schibsted.no
bedrift.schibsted.no
akademi.schibsted.no
*.login.schibsted.com
s5cd00ap1-dr.schibsted.no
uc16.janrainengage.com
id.schibsted.no
schibsted.com
session-service.payment.schibsted.no
stage-snocrm.schibsted.no
minbedrift.schibsted.no
selfservice.payment.schibsted.no
agressotest.schibsted.no
agressotest.schibsted.no
schibsted.com
s5cd00ap1.schibsted.no
test-minbedrift.schibsted.no
sno-crm-apit.schibsted.no
sim.invoice.finance.schibsted.no
signicat.payment.schibsted.no
it.schibsted.no
payment.schibsted.no
test-student.schibsted.no
ap.no
payment.schibsted.no
student.schibsted.no
aftenposten.no
student.schibsted.no
bedrift.schibsted.no
uc16.janrainengage.com
bedrift.schibsted.no
s5cp00ap1.schibsted.no
uc16.janrainengage.com
test-student.schibsted.no
payment.schibsted.no
payment.schibsted.no
test-bedrift.schibsted.no

Certificate

The complete raw certificate details for test-fulltilgang.schibsted.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0whI2g1/iJkw8v0H+UO5
34pRwA1ToPYtYhQcTTXhx9KUgdCivPUcW/C0Gt0+7hg3DU5e2HChayMKDGUDCuT+
VH2MAzHhVXF857P+C60zCtKxQ4pa44/eLwpcnsKZnplHvA3AeckTOy5uIh6Xi7p7
UL7ihjUgsI9sQag4Btc1yvc7x9zEsv2jrDQwQ+sz79ZdrDeUWZrlAZb5wHnavKNG
KbF+zGgB/6UOkwV75MRf3VZ9E3xACvoQcG3wwBO0jDbfRV7IhfQU2NDG35Gw6DDN
vpcgr3UMJQ5twHfVRg0rV//omBPYI7PUBzpBY86cfc/VUqSF5faxNs/p0vTwzoJ8
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289283245364157750433170863901957142819768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 06:37:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 06:37:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-fulltilgang.schibsted.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26640367625126201894079876981588204552879224223219830677231099259328945033980054233477257397971228543792978634025955535151665062595663675358020640609438723191724093264330258570260444259021023801350496688385543242768696337922276709863876633293156676129908369370525900149983276122948042272102418361894706188346117857424016249831254997930980810842287580291851908314799049466245298948516516587938243866625383760896285541405994392267753802072486878724563343705672670114493287854586188077328267865913999798316476949371619914580287007215032315652442860251930479133759150244888919767965872480129473302378813139475887475031111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3df4c4d18ba4bbfe13e6bc298b272d26141e523d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fulltilgang.schibsted.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e5ff127020000040300473045022100cc2dddafc44816c70c94f549936d1203a16b2c6730c7c45c0ddd93d8f6394b9802202eb3401f944c5b1bda7038e676841f16cfea06e1c5ad8c7a9a86a5e34e259cb900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e5ff129dc00000403004630440220228b23bf4175b381e0e16d27a82f03e5b5483713abcd3db468818ea58a706a88022059f8e1abca71e662ef11e95723ce87a51fb8f8aba6108190d109c1658355df2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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